Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa
File:                     f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa (raw, json)
Hash identifier:          YkeC6AQ7oIe79PUy0Ly9/EkTRX9IOplHcoog95+RblQ=
Subject key identifier:   D4:0B:ED:3F:0E:B4:4D:6B:F9:CD:D4:41:09:AD:FD:78:8F:26:4C:15
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE0CDF5EF745FD9A34F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     54133
IP address blocks:        2001:470:1d1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e0:cd:f5:ef:74:5f:d9:a3:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=6870fd75-359a-43ca-aaac-89f4fe793be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:56:df:bc:10:5b:48:87:10:64:c4:17:f2:
                    ed:2c:16:81:65:e1:82:5d:26:45:10:d3:2e:15:97:
                    5c:11:e5:6c:6a:a4:cb:de:db:93:7d:d7:d6:e2:00:
                    e9:e5:0a:06:fb:2c:9b:f1:66:a6:a8:f8:3a:81:d3:
                    14:5e:13:b7:10:7b:47:df:ee:3e:26:54:1c:6f:32:
                    72:82:d7:0b:2a:b3:d9:89:10:7f:bf:ac:25:05:f3:
                    73:49:bb:f3:89:63:af:b5:45:35:26:59:88:80:7e:
                    ba:1f:e8:b6:1a:91:d8:ec:70:98:6a:2b:a6:79:0f:
                    e3:09:c9:dc:1e:d1:a5:a6:d1:9e:66:54:69:b1:7e:
                    9e:42:c6:84:0f:71:18:df:d9:bf:4b:fa:bb:4a:4f:
                    21:97:b1:3b:ed:ed:24:53:34:17:15:63:df:b8:09:
                    17:84:a2:a8:f6:8c:cf:08:fc:f7:dd:26:73:03:0a:
                    31:ea:f5:a1:fe:58:3d:fa:f3:a0:71:f0:2d:c1:7f:
                    5c:d9:ae:e8:58:d9:11:ba:ba:9b:a8:e9:aa:f1:9c:
                    ee:1b:57:4c:4b:9c:d6:88:4f:64:b6:ee:1d:36:fa:
                    90:21:99:25:ec:02:33:11:50:62:51:fc:96:d8:23:
                    49:ac:52:13:97:b8:df:f5:75:d9:96:8d:d8:ba:d7:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:ED:3F:0E:B4:4D:6B:F9:CD:D4:41:09:AD:FD:78:8F:26:4C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:a9:56:14:e8:3f:f8:0b:83:42:8f:e8:d5:7b:8b:09:6a:
         fd:d8:52:b4:1d:fb:19:4d:a0:21:80:7e:01:53:a7:69:6b:27:
         bd:df:2b:f4:43:d6:a9:61:81:15:af:bb:62:fd:ec:b1:e5:03:
         51:88:98:55:5e:e6:1a:a2:e4:72:be:15:40:ae:cc:b3:31:24:
         7d:21:6b:3f:29:6c:1e:10:11:38:8a:48:f9:2c:91:aa:76:13:
         be:f5:8e:cc:e7:93:e5:52:57:9e:92:55:1f:9a:98:74:8b:fc:
         22:b9:79:16:4e:58:08:db:07:c6:b2:c3:17:5f:37:99:bb:d1:
         80:ef:11:86:20:83:29:5e:41:3e:25:e6:61:50:6b:52:26:42:
         91:9e:55:43:92:21:9e:72:61:8d:f0:d1:75:ae:19:3d:43:e6:
         04:8e:99:35:8a:5d:67:e4:28:6e:25:70:8b:24:04:99:6c:83:
         b7:3d:ba:a8:d2:3f:64:d1:cf:00:28:55:b9:11:53:08:14:6d:
         e0:56:63:54:6a:06:91:0d:3c:b2:01:13:23:d1:65:17:4e:49:
         0f:f0:47:54:8a:13:f8:62:c6:26:64:af:2b:d7:97:3a:da:33:
         50:bd:06:be:6e:3d:65:49:17:70:7c:74:d8:b2:3d:78:d2:cb:
         09:88:df:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX+DN9e90X9mjTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
Njg3MGZkNzUtMzU5YS00M2NhLWFhYWMtODlmNGZlNzkzYmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp9W37wQW0iHEGTEF/LtLBaBZeGCXSZFENMu
FZdcEeVsaqTL3tuTfdfW4gDp5QoG+yyb8WamqPg6gdMUXhO3EHtH3+4+JlQcbzJy
gtcLKrPZiRB/v6wlBfNzSbvziWOvtUU1JlmIgH66H+i2GpHY7HCYaiumeQ/jCcnc
HtGlptGeZlRpsX6eQsaED3EY39m/S/q7Sk8hl7E77e0kUzQXFWPfuAkXhKKo9ozP
CPz33SZzAwox6vWh/lg9+vOgcfAtwX9c2a7oWNkRurqbqOmq8ZzuG1dMS5zWiE9k
tu4dNvqQIZkl7AIzEVBiUfyW2CNJrFITl7jf9XXZlo3YutcuNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQL7T8OtE1r+c3UQQmt/XiPJkwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA4N2UwYjMtZjA4MC0z
YWQ5LWIxOTQtNTBiN2M2MWRiYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGbTqVYU6D/4C4NCj+jVe4sJav3YUrQd+xlNoCGAfgFTp2lrJ73f
K/RD1qlhgRWvu2L97LHlA1GImFVe5hqi5HK+FUCuzLMxJH0haz8pbB4QETiKSPks
kap2E771jsznk+VSV56SVR+amHSL/CK5eRZOWAjbB8aywxdfN5m70YDvEYYggyle
QT4l5mFQa1ImQpGeVUOSIZ5yYY3w0XWuGT1D5gSOmTWKXWfkKG4lcIskBJlsg7c9
uqjSP2TRzwAoVbkRUwgUbeBWY1RqBpENPLIBEyPRZRdOSQ/wR1SKE/hixiZkryvX
lzraM1C9Br5uPWVJF3B8dNiyPXjSywmI33w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:04:20 2025 by rpki-client